A tool for network-based package monitoring and recovery. The tool scans a database to identify a gap in network traffic data. The tool determines whether at least one gap in the network traffic data is identified in the database, wherein the at least one gap is a gap in communication between a target device and a communication serve. Responsive to a determination that at least one gap in the network traffic data is identified, the tool determines a missing package from a package archive. The tool determines whether there is active network traffic between the target device and the communication server. Responsive to a determination that there is active network traffic between the target device and the communication server, the tool replays the missing package in the active network traffic between the target device and the communication server.